Trisul Network Analytics
Developer Zone

User Tools

Site Tools

You are here: Home » offline » Analyzing the WRCCDC PCAPs : Part 3 Analysis using TrisulNSM
Trace:
offline:wrccdc_pcaps_results

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revisionBoth sides next revision
offline:wrccdc_pcaps_results [2018/05/12 23:55] – [Trisul EDGE: Graph analytics discover relationships] veeraoffline:wrccdc_pcaps_results [2018/05/12 23:55] – [File extraction] veera
Line 94: Line 94:
  
 [{{ :offline:wrccdc2.png?direct&400 |From any place you can grab the packets, if you think the volume can be handled by Wireshark}}] [{{ :offline:wrccdc2.png?direct&400 |From any place you can grab the packets, if you think the volume can be handled by Wireshark}}]
- 
- 
-==== File extraction ==== 
- 
-<code> 
-DOCKER:unpl:root savedfiles$ ls /tmp/savedfiles/*.exe -l 
--rw-r--r-- 1 trisul trisul   287392 May 11 12:52 /tmp/savedfiles/00_00_f91a_10.128.0.201__PsGetsid.exe 
--rw-r--r-- 1 trisul trisul   287392 May 11 12:52 /tmp/savedfiles/00_00_fb80_10.128.0.201__PsGetsid.exe 
--rw-r--r-- 1 trisul trisul 12582912 May 11 12:52 /tmp/savedfiles/00_01_dbcf_10.150.0.70__chocolate_debug.exe 
--rw-r--r-- 1 trisul trisul 42846720 May 11 12:52 /tmp/savedfiles/00_01_df63_10.150.0.70__chocolate_debug.exe 
-DOCKER:unpl:root savedfiles$  
- 
- 
-</code> 
- 
  
  
  
offline/wrccdc_pcaps_results.txt · Last modified: 2018/05/13 00:08 by veera